[Solved] Connection good but no Internet and local rescources - comp-lzo or compress

Andy0370

Hello,

i'm starting OpenVPN on my router with openwrt. If i login with my notebook (Windows 10) everything works... local recources, Internet (redirected over vpn), samba and so on.

If i try login with an mobile (Android or IOS) i can connect, but i haven't access to local resources or internet. I've used the same ovpn File for both.

For Installing i've used that scripts:

https://openwrt.org/docs/guide-user/services/vpn/openvpn/basic#prerequisites

Can someone help me with that issue?

greets, Andy

Andy0370

No one can help to solve my problem?

TinCanTech

You need to read your log files to find the problem.

Andy0370

Hi,

i don't know where i should search? I'm not sure if there is some difference between IOS or Windows? I've using same configuration, keys and certificates for both (Test), could there be a problem? Windows works perfect with DNS, Internet, Samba and so on. With IOS i can connect, but can't reach the tunnel-IP's or something from my internal network, no internet, no trace.. nothing. The IOS-Client log shows me i get IP, the HOST-IP... everything, but i can't reach nothing... also can't reach the VPN-given IP (10.8.0.2). The Server-Logs show me the same:

IOS-Client:

Thu Mar 14 00:57:19 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 TLS: Initial packet from [AF_INET]80.187.84.250:21960, sid=7e809db1 f9a6b75a
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 VERIFY OK: depth=1, C=GB, ST=London, O=WWW Ltd.
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 VERIFY OK: depth=0, CN=vpnclient
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_GUI_VER=net.openvpn.connect.ios_3.0.2-894
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_VER=3.2
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_PLAT=ios
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_NCP=2
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_TCPNL=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_PROTO=2
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_LZO_STUB=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_COMP_STUB=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_COMP_STUBv2=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_AUTO_SESS=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 peer info: IV_BS64DL=1
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:21960 [vpnclient] Peer Connection Initiated with [AF_INET]80.187.84.250:21960
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 MULTI: Learn: 10.8.0.2 -> vpnclient/80.187.84.250:21960
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 MULTI: primary virtual IP for vpnclient/80.187.84.250:21960: 10.8.0.2
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 SENT CONTROL [vpnclient]: 'PUSH_REPLY,redirect-gateway def1,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.2.1,compress lzo,persist-tun,persist-key,dhcp-option DOMAIN coenen.local,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 14 00:57:20 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:21960 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

Windows-Client:

Thu Mar 14 00:51:35 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 TLS: Initial packet from [AF_INET]80.187.84.250:20651, sid=5630e994 70347cc4
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 VERIFY OK: depth=1, C=GB, ST=London, O=WWW Ltd.
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 VERIFY OK: depth=0, CN=vpnclient
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_VER=2.4.6
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_PLAT=win
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_PROTO=2
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_NCP=2
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_LZ4=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_LZ4v2=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_LZO=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_COMP_STUB=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_COMP_STUBv2=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_TCPNL=1
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 peer info: IV_GUI_VER=OpenVPN_GUI_11
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: 80.187.84.250:20651 [vpnclient] Peer Connection Initiated with [AF_INET]80.187.84.250:20651
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 MULTI: Learn: 10.8.0.2 -> vpnclient/80.187.84.250:20651
Thu Mar 14 00:51:36 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 MULTI: primary virtual IP for vpnclient/80.187.84.250:20651: 10.8.0.2
Thu Mar 14 00:51:37 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 14 00:51:37 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 SENT CONTROL [vpnclient]: 'PUSH_REPLY,redirect-gateway def1,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.2.1,compress lzo,persist-tun,persist-key,dhcp-option DOMAIN coenen.local,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Thu Mar 14 00:51:37 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Mar 14 00:51:37 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 14 00:51:37 2019 daemon.notice openvpn(an_vpnserver)[7651]: vpnclient/80.187.84.250:20651 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key

Maybe my mistake or i read not enough... but i don't understand ;-)

Andy

TinCanTech

These logs both show that the VPN is successfully connected.

I would expect your iOS device to work more or less exactly the same as your Windows device.

Connect the iOS and try to ping the server at 10.8.0.1

Andy0370

I can't reach the IP from the tunnel. Openvpn is connected, 10.8.0.1 not reachable... i use traceroute on the IOS. I tried with android too... same problem, only windows works perfectly...

In the logfile from IOS i see at the end = EVENT: CONNECTED ......gw=[/]

no Gateway? Because Windows works, but it's an Notebook from my network...

config openvpn 'an_vpnserver'
option enabled '1'
option verb '3'
option dev 'tun0'
option topology 'subnet'
option port '1194'
option proto 'udp'
option status /tmp/openvpn-andy.log
option server '10.8.0.0 255.255.255.0'
option client_to_client '1'
option compress 'lzo'
option keepalive '10 120'
option persist_tun '1'
option persist_key '1'
option dh '/etc/openvpn/an_dh.pem'
option tls_crypt '/etc/openvpn/an_tc.pem'
option ca '/etc/openvpn/an_ca.crt'
option cert '/etc/openvpn/an_vpnserver.crt'
option key '/etc/openvpn/an_vpnserver.key'
list push 'redirect-gateway def1'
list push 'route 192.168.2.0 255.255.255.0'
list push 'dhcp-option DNS 192.168.2.1'
list push 'compress lzo'
list push 'persist-tun'
list push 'persist-key'
list push 'dhcp-option DOMAIN xxxx.local'

TinCanTech

Try without these:

Andy0370 wrote

option compress 'lzo'
list push 'compress lzo'

Compression in iOS and Android seems to be problematic ..

Andy0370

I've configured out... start OPENVPN new... then the router completly... same, if i connect i can't reach Server, Tunnel, Internet

config openvpn 'an_vpnserver'
option enabled '1'
option verb '3'
option dev 'tun0'
option topology 'subnet'
option port '1194'
option proto 'udp'
option status /tmp/openvpn-andy.log
option server '10.8.0.0 255.255.255.0'
option client_to_client '1'
option compress 'lzo'
option keepalive '10 120'
option persist_tun '1'
option persist_key '1'
option dh '/etc/openvpn/an_dh.pem'
option tls_crypt '/etc/openvpn/an_tc.pem'
option ca '/etc/openvpn/an_ca.crt'
option cert '/etc/openvpn/an_vpnserver.crt'
option key '/etc/openvpn/an_vpnserver.key'
list push 'redirect-gateway def1'
list push 'route 192.168.2.0 255.255.255.0'
list push 'dhcp-option DNS 192.168.2.1'
list push 'persist-tun'
list push 'persist-key'
list push 'dhcp-option DOMAIN xxx.local'

TinCanTech

You are still using option compress 'lzo' on the server ...

Andy0370

Sorry, my mistake...

checked out, but same.. restart openvpn, new boot Rooter, reboot mobile.. nothing changed.... no tracert, internet and so on

config openvpn 'an_vpnserver'
option enabled '1'
option verb '3'
option dev 'tun0'
option topology 'subnet'
option port '1194'
option proto 'udp'
option status /tmp/openvpn-andy.log
option server '10.8.0.0 255.255.255.0'
option client_to_client '1'
option keepalive '10 120'
option persist_tun '1'
option persist_key '1'
option dh '/etc/openvpn/an_dh.pem'
option tls_crypt '/etc/openvpn/an_tc.pem'
option ca '/etc/openvpn/an_ca.crt'
option cert '/etc/openvpn/an_vpnserver.crt'
option key '/etc/openvpn/an_vpnserver.key'
list push 'redirect-gateway def1'
list push 'route 192.168.2.0 255.255.255.0'
list push 'dhcp-option DNS 192.168.2.1'
list push 'persist-tun'
list push 'persist-key'
list push 'dhcp-option DOMAIN xxxx.local'

TinCanTech

We need to see the logs (server at verb 4, iOS client at default)

And only use ping 10.8.0.1

Andy0370

Ok, i've done.. verb "4" - restart Openvpn, connect IOS and ping from mobile:

[oconf=Server Log]

Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: MULTI: multi_create_instance called
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Re-using SSL/TLS context
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Control Channel MTU parms [ L:1621 D:1156 EF:94 EB:0 ET:0 EL:3 ]
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1541,tun-mtu 1500,proto UDPv4,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 TLS: Initial packet from [AF_INET]80.187.98.221:2792, sid=5ba1c688 40ead2be
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 VERIFY OK: depth=1, C=GB, ST=London, O=WWW Ltd.
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 VERIFY OK: depth=0, CN=vpnclient
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_GUI_VER=net.openvpn.connect.ios_3.0.2-894
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_VER=3.2
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_PLAT=ios
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_NCP=2
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_TCPNL=1
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_PROTO=2
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_LZO_STUB=1
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_COMP_STUB=1
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_COMP_STUBv2=1
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_AUTO_SESS=1
Thu Mar 14 21:52:58 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 peer info: IV_BS64DL=1
Thu Mar 14 21:52:58 2019 daemon.warn openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1542'
Thu Mar 14 21:52:58 2019 daemon.warn openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: 80.187.98.221:2792 [vpnclient] Peer Connection Initiated with [AF_INET]80.187.98.221:2792
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 MULTI_sva: pool returned IPv4=10.8.0.2, IPv6=(Not enabled)
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 MULTI: Learn: 10.8.0.2 -> vpnclient/80.187.98.221:2792
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 MULTI: primary virtual IP for vpnclient/80.187.98.221:2792: 10.8.0.2
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 PUSH: Received control message: 'PUSH_REQUEST'
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 SENT CONTROL [vpnclient]: 'PUSH_REPLY,redirect-gateway def1,route 192.168.2.0 255.255.255.0,dhcp-option DNS 192.168.2.1,persist-tun,persist-key,dhcp-option DOMAIN coenen.local,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM' (status=1)
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 Data Channel: using negotiated cipher 'AES-256-GCM'
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 Data Channel MTU parms [ L:1549 D:1450 EF:49 EB:406 ET:0 EL:3 ]
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 14 21:52:59 2019 daemon.notice openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Thu Mar 14 21:52:59 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:52:59 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:52:59 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:01 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:01 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:01 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:05 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:05 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:05 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:09 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:09 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:09 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:09 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:10 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:11 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen
Thu Mar 14 21:53:11 2019 daemon.warn openvpn(an_vpnserver)[13172]: vpnclient/80.187.98.221:2792 IP packet with unknown IP version=15 seen


[/oconf]

TinCanTech

First things first, what version of openvpn is your server running ?
It is clearly recorded in the log file.

Andy0370 wrote IP packet with unknown IP version=15 seen

This usually means something is wrong with your compression settings.

You must make sure your server and client are using the same setting.

I don't know how your router assigns this setting to itself.

Also, because of VORACLE it is best to not use any compression.

Andy0370

Shit, i haven't changed the Client File on the mobile... that's the reason about the problem... i've now changed and everything works fantastic.... thank you so much for your help ! Can i ignore the different MTU Size 1541 / 1542?

Andy0370

The OpenVPN- Version i use is 2.4.5-4.2 installed on Openwrt. Hardware is an Linksys- Router.

Andy0370

I mean i forgot to configure out the compression from the Client config ;-)

TinCanTech

Don't worry about the MTU warnings .. they are totally bogus.

Thanks for letting us know it works 8-)